Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
File:                     oiK21tBSghQiHUrOpH4axhHvQno.mft (raw, json)
Hash identifier:          qAEs+ckQVmSmSgzVxBxs4K8sJ5Gn6dMrfhG87rEybyo=
Subject key identifier:   31:67:E6:30:96:2A:08:98:28:3A:6B:C6:25:24:33:C2:32:58:E4:50
Authority key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
Certificate issuer:       /CN=A911F177/serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Certificate serial:       088C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
Manifest number:          0883
Signing time:             Sun 20 Sep 2026 20:41:21 +0000
Manifest this update:     Sun 20 Sep 2026 20:41:20 +0000
Manifest next update:     Sun 27 Sep 2026 20:41:20 +0000
Files and hashes:         1: oiK21tBSghQiHUrOpH4axhHvQno.crl (hash: Nvfhf1H17yDOtTzsfiUUxGnjUkBGWs7/7n2SAxF7L7A=)
                          2: xosLs9gxjLye4Md2p_wN9v341dg.asa (hash: ELumtCiBu3e8hIqFAE5GuOwgdm+a08Wy8PhqYRVWwfA=)
                          3: 90203ACEDEE811EBA82BEF41C4F9AE02.roa (hash: oot2eMtZy8Bb20t9t+iEwLkFtUPz+/MiX0LVfUtGAbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
                          rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
        Validity
            Not Before: Sep 20 20:41:20 2026 GMT
            Not After : Sep 27 20:41:20 2026 GMT
        Subject: CN=6ab044f1-8318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:5a:33:be:f9:99:dc:11:0f:08:e2:c6:d5:
                    09:cd:ac:08:ed:79:59:84:6b:0e:b4:d1:34:cc:22:
                    22:64:f5:5d:df:3b:08:c6:75:d0:69:d8:40:36:40:
                    53:76:fc:13:a2:10:1a:6e:f9:5c:14:4f:97:84:1c:
                    ef:7a:1d:43:3c:74:96:4e:a8:e7:c5:54:2f:1c:39:
                    22:07:4b:96:4a:c0:84:38:66:fb:99:4d:e3:ad:96:
                    18:02:09:10:b6:6d:83:c2:eb:c1:3f:34:de:a0:b8:
                    0f:bf:5f:33:e4:e1:79:a5:f4:3f:7b:13:6c:55:0d:
                    19:b2:56:a8:ba:78:8a:eb:ff:0b:10:8f:f9:25:d1:
                    51:31:fd:b9:4b:00:84:af:0a:80:68:c3:8d:15:b9:
                    b1:74:b4:7a:c4:7f:fe:ef:9f:10:c2:0b:9c:c8:b4:
                    18:38:8c:a1:22:a1:9b:17:77:a8:5d:ad:87:d5:25:
                    39:4e:7d:12:56:e7:01:ba:ec:2e:a9:58:6e:e2:77:
                    a7:84:4d:32:b7:8e:bb:17:17:a3:ff:3f:75:22:b0:
                    10:00:50:b1:9d:01:2c:aa:ae:57:5f:1c:8b:0d:33:
                    ba:29:48:78:31:9e:4d:a7:2b:d0:5e:bd:d9:cd:46:
                    79:a3:49:4c:9d:06:b2:ec:f0:3b:f2:bd:b4:d8:b9:
                    d0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:67:E6:30:96:2A:08:98:28:3A:6B:C6:25:24:33:C2:32:58:E4:50
            X509v3 Authority Key Identifier:
                keyid:A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:2c:2d:e2:1b:60:0c:04:a7:cb:e2:38:01:0f:49:3f:5e:
         72:06:c1:db:66:1c:fe:f8:20:63:fd:07:eb:60:e5:9e:f9:d4:
         0d:98:2b:d6:8d:c6:ab:bf:12:7e:e4:95:1d:85:cc:30:97:c9:
         ec:00:e9:ee:c6:25:f6:ec:7a:3a:c2:1a:fe:a5:45:25:56:66:
         65:de:82:2b:80:31:c0:73:32:7a:da:4e:b2:d1:ba:4d:0d:40:
         ec:6e:0d:87:d3:3f:4a:bd:1d:b9:1b:09:58:d2:df:cf:cc:c1:
         b1:4b:e3:15:1f:f6:fe:a6:9f:67:84:9a:4d:67:c8:a2:f5:b2:
         24:f1:14:66:1b:06:8e:f5:2d:20:c6:f0:96:57:91:f2:c7:0c:
         03:2e:62:44:88:de:56:19:90:4b:40:b8:53:7a:0d:4e:77:4c:
         b7:fe:f9:34:58:44:db:86:08:76:5e:7f:5c:82:fc:88:92:1b:
         89:4a:53:19:82:f4:5e:b5:40:82:8a:fe:24:6a:f1:ef:be:38:
         57:8d:d0:47:75:8a:85:66:33:7e:5f:73:03:1d:28:85:18:ab:
         3b:56:ff:5c:37:46:5d:b3:08:2f:8e:be:e1:6d:02:af:bb:cb:
         de:0d:15:22:5a:f4:b0:91:5d:a7:d3:ba:61:c9:6b:ad:95:57:
         2e:ab:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:27:27 2026 by rpki-client